CVE-2014-2472: Medium severity oracle virtualization vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv), a different vulnerability than CVE-2014-2474, CVE-2014-2476, and CVE-2014-6459.

Affected Software

2 affected components

Oracle Virtualization=5.0

Oracle Virtualization=5.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2472?

CVE-2014-2472 is classified with a severity that impacts the availability of Oracle Secure Global Desktop.

How do I fix CVE-2014-2472?

To fix CVE-2014-2472, users should apply the latest security updates provided by Oracle for versions 5.0 and 5.1 of Oracle Virtualization.

Which versions of Oracle Virtualization are affected by CVE-2014-2472?

CVE-2014-2472 affects Oracle Virtualization versions 5.0 and 5.1.

Can CVE-2014-2472 be exploited remotely?

Yes, CVE-2014-2472 can be exploited by remote attackers.

What component is affected by CVE-2014-2472?

CVE-2014-2472 affects the Oracle Secure Global Desktop component, specifically related to SGD Proxy Server.